HTTP cookies, or how not to design protocols

142 points by tptacek

Read the article

Discussion on Hacker News